allow cnd diag_device:chr_file { read write };
allow cnd self:capability { net_raw };